Skip to content
Open
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions vulns/CVE-2025-39838.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
reachability: Local
memory_corruption: Likely Null pointer can lead to Memory corruption ;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should be a boolean field.

bug_class: CWE-476: NULL Pointer Dereference;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please leave out the CWE.

Impact: Crash,memory leak;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Impact: Crash,memory leak;
Impact: Crash,memory leak

notes: Null Value is passed without checks leading to possible crash. CONFIG_CIFS needs to be enabled for exploitation ;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
notes: Null Value is passed without checks leading to possible crash. CONFIG_CIFS needs to be enabled for exploitation ;
notes: Null Value is passed without checks leading to possible crash. CONFIG_CIFS needs to be
enabled for exploitation

author: Microsoft
version: 0.1
7 changes: 7 additions & 0 deletions vulns/CVE-2025-39857.yml
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please apply the comments for the file above to this one too.

Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
reachability: Local
memory_corruption: Likely since NUll pointer may cause memory corruption ;
bug_class:CWE-476: NULL Pointer Dereference ;
Impact: crash and memory leak ;
notes: Issue due to null value for ibdev->dma_device. CONFIG_SMC needs to be enabled for exploitation ;
author: Microsoft
version: 0.1
7 changes: 7 additions & 0 deletions vulns/CVE-2025-39862.yml
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please apply the comments for the file above to this one too.

Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
reachability: Local
memory_corruption: true ;
bug_class: memory / data corruption ;
Impact: crash and integrity issue ;
notes:wcid->sta entry is not cleared after hardware restart. The fix ensure the value wcid->sta is set to 0. CONFIG_MT76_CORE and CONFIG_MT7915E should be enabled for exploitation ;
author: Microsoft
version: 0.1